MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 0d7895cc3f707aa5fcf5abb1ca15f576de51e3ab70c631408f5aa75c81774c4b. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	0d7895cc3f707aa5fcf5abb1ca15f576de51e3ab70c631408f5aa75c81774c4b
SHA3-384 hash:	67736ef234e0fa66ef806fbeeb19bbaec801b3ce0e22b13a82b094da8a7874b4a7baeef2626c907ab9850da5d57d64c0
SHA1 hash:	d01d535e407d55183d96860cfba29e7c99e3326f
MD5 hash:	b8dee763d6ab6f88952ef7063b3be0f1
humanhash:	romeo-freddie-ack-three
File name:	w.sh
Download:	download sample
Signature	Mirai Alert Create hunting rule
File size:	1'201 bytes
First seen:	2025-04-10 15:13:22 UTC
Last seen:	Never
File type:	sh
MIME type:	text/plain
ssdeep	24:8D+7UI7wD+CINdD+xIvD+NINdD+fSIfD+hIVD+aIfD+5IBD+xNIlIvD+fIRnD+mH:8D+7t7wD+XNdD+mvD+ivD+fHfD+2VD+I
TLSH	T1E421D0CE8195EF118C77DF21B852C138100398C098DE6FC9D98CCBF2A3D9934B201749
Magika	txt
Reporter	abuse_ch
Tags:	sh

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

83

Origin country :

DE

Vendor Threat Intelligence

CyberFortress Malicious

Verdict:

Malicious

Score:

99.1%

Link:

https://cyber-fortress.com/docs/result/index.php?id=67f7e62c1dba888a93cf4ce2linux22vpnfull_triage

Tags:

downloader trojan mirai virus

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/0d7895cc3f707aa5fcf5abb1ca15f576de51e3ab70c631408f5aa75c81774c4b

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/0d7895cc3f707aa5fcf5abb1ca15f576de51e3ab70c631408f5aa75c81774c4b/

ReversingLabs TitaniumCloud Linux.Downloader.Generic

Threat name:

Linux.Downloader.Generic

Alert

Create hunting rule

Status:

Suspicious

First seen:

2025-04-10 15:14:17 UTC

File Type:

Text (Shell)

AV detection:

15 of 38 (39.47%)

Threat level:

  3/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=bv4jltb7ob5kl7hvvoy4ufpvo3pfdy5lodddcqeplktvzalxjrfq._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

n/a

Link:

https://tria.ge/reports/250410-smflyavxbx/

Behaviour

Modifies registry class

Suspicious use of SetWindowsHookEx

Enumerates physical storage devices

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Malicious File

Threat name:

Malicious File

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/0d7895cc3f707aa5fcf5abb1ca15f576de51e3ab70c631408f5aa75c81774c4b